Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    902s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 13:21

General

  • Target
    http://google.com
  • Sample261102-ql6evsfc28
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 27 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4272
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff97c46c188,0x7ff97c46c194,0x7ff97c46c1a0
      2⤵
        PID:4240
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,3330942744545253251,4387132550389283481,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:11
        2⤵
        • System Time Discovery
        PID:5776
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,17227197438742666472,5629249094739105685,262144 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:2
        2⤵
          PID:5688
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,16281906818304509240,5696566661621284654,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:13
          2⤵
            PID:4604
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3624,i,2381858706004979341,3634659679883820192,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
            2⤵
              PID:1520
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3628,i,10386600557421167019,12146709020317748538,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
              2⤵
                PID:2432
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,6003854673793054582,7137558021751510888,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:1
                2⤵
                  PID:1688
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4396,i,5361487032993021429,6589261209167071697,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:9
                  2⤵
                    PID:5948
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5380,i,12056631754775008378,14617271028576668376,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:1
                    2⤵
                      PID:4736
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3904,i,17931433830983483684,8005060868418608006,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=3880 /prefetch:14
                      2⤵
                        PID:564
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3908,i,17289979888555216257,1112093343896738446,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
                        2⤵
                          PID:2276
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,5049759145222932780,2812008291742166890,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
                          2⤵
                            PID:2648
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,5049759145222932780,2812008291742166890,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
                            2⤵
                              PID:2292
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6612,i,13732689092051767336,2521066287190933614,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:1
                              2⤵
                                PID:2844
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,2534973327718985216,13385022803230549746,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14
                                2⤵
                                  PID:716
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,3097122490619547081,3752456224708314986,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
                                  2⤵
                                    PID:4376
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,3530201027841288488,18110670382871482108,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
                                    2⤵
                                      PID:2860
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6736,i,7879607625124523803,1875283070810391070,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:1
                                      2⤵
                                        PID:1392
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5424,i,11690702453478047701,8409355987017533469,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:1
                                        2⤵
                                          PID:4696
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6892,i,6236472822677355662,3578950850302737839,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:14
                                          2⤵
                                            PID:4652
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6200,i,18252716558478314323,12303037503022726550,262144 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=6768 /prefetch:10
                                            2⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:4788
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5572,i,17775962679553940481,15066922443215449688,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:1
                                            2⤵
                                              PID:5916
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=3480,i,16525973922253579232,16303329874307291042,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:1
                                              2⤵
                                                PID:3096
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=3460,i,1356289274311229824,18163840650522526160,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:1
                                                2⤵
                                                  PID:3616
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=3740,i,4556312820605023479,16494447958698842254,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:1
                                                  2⤵
                                                    PID:1680
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7156,i,16209460187172081845,2091072445987779382,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=7180 /prefetch:1
                                                    2⤵
                                                      PID:5292
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7328,i,13920107230222435186,7024795079145491733,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=7372 /prefetch:1
                                                      2⤵
                                                        PID:5920
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7472,i,13442855677649140343,14906728311841900356,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:12
                                                        2⤵
                                                          PID:4448
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,13989402473387546776,17670942000333211075,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:14
                                                          2⤵
                                                            PID:1992
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,603103723695197862,6582321708445619374,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=2960 /prefetch:14
                                                            2⤵
                                                              PID:3112
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7808,i,13711079769684123795,2270926754537423504,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=7792 /prefetch:14
                                                              2⤵
                                                                PID:760
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,13564091664336131408,10282944610774079894,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=7976 /prefetch:14
                                                                2⤵
                                                                  PID:4492
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7672,i,8503169736733421420,7630171022830803960,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=2960 /prefetch:14
                                                                  2⤵
                                                                    PID:4532
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7048,i,18176996983979412743,16602154123065698467,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:1
                                                                    2⤵
                                                                      PID:4012
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7748,i,10251150226332374937,5051657587983791235,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=7716 /prefetch:1
                                                                      2⤵
                                                                        PID:3488
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8112,i,13750297929383643917,18264700763361620033,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=7732 /prefetch:1
                                                                        2⤵
                                                                          PID:4528
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8200,i,12380300121230254283,2582565665434716347,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=3296 /prefetch:1
                                                                          2⤵
                                                                            PID:4524
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7700,i,5224431635982566780,8869968605616588062,524288 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=7752 /prefetch:14
                                                                            2⤵
                                                                              PID:4616
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7720,i,15838014418198511583,3658019343117891561,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:1
                                                                              2⤵
                                                                                PID:1600
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8176,i,4937102222643867140,2940230786364471361,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:1
                                                                                2⤵
                                                                                  PID:4668
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7708,i,5347510602755853997,17666094600213677693,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=8420 /prefetch:1
                                                                                  2⤵
                                                                                    PID:3964
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7788,i,17943849943386386307,2108557031224226770,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=7692 /prefetch:1
                                                                                    2⤵
                                                                                      PID:5364
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=7360,i,4944604951706230277,15248213381862052844,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:1
                                                                                      2⤵
                                                                                        PID:2468
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=3868,i,2562344383554074553,11367605006096643148,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=8088 /prefetch:1
                                                                                        2⤵
                                                                                          PID:5736
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=6040,i,7711938260083766932,4255255824479775333,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=8612 /prefetch:1
                                                                                          2⤵
                                                                                            PID:1716
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=4380,i,7304360362593461805,17110828785082176454,2097152 --field-trial-handle=2584,i,14084819667563738134,9505911896636788319,262144 --variations-seed-version --mojo-platform-channel-handle=8088 /prefetch:1
                                                                                            2⤵
                                                                                              PID:3384
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                            1⤵
                                                                                              PID:6076
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                              1⤵
                                                                                                PID:5276
                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                1⤵
                                                                                                  PID:5904
                                                                                                • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                  \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                  1⤵
                                                                                                    PID:3860

                                                                                                  Network

                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                        Replay Monitor

                                                                                                        Loading Replay Monitor...

                                                                                                        Downloads

                                                                                                        0d14ccea-3a70-4ed0-b233-775f09a37f0c.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0d14ccea-3a70-4ed0-b233-775f09a37f0c.tmp
                                                                                                        • Size 34KB
                                                                                                        • SHA256 b5fb5688b9253ce823ebec61e225a456c38bcf6dbd42d41aa6080b213b401a4a
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        23a45cc5-e802-4904-9848-1db98e4891d2.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\23a45cc5-e802-4904-9848-1db98e4891d2.tmp
                                                                                                        • Size 34KB
                                                                                                        • SHA256 647e86c79a36539886a87882c3865c2f56a1ad88331b5cc66db02120ff6361dd
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        391bb510-e81b-42dd-8417-8878e1939086.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\391bb510-e81b-42dd-8417-8878e1939086.tmp
                                                                                                        • Size 38KB
                                                                                                        • SHA256 254d2a086842c0d2493d75b9f64381d7dde95145df01124389068735ee2df9b8
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        609ba72e-c8f4-4764-af6c-4d42beac6091.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\609ba72e-c8f4-4764-af6c-4d42beac6091.tmp
                                                                                                        • Size 38KB
                                                                                                        • SHA256 5ed5d49b48723b32653ff977752ab29f7ddea5a85ea0e6f8b27ae7509a0d1488
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        799d228a-ab25-44a2-bf7a-f739857e86a7.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\799d228a-ab25-44a2-bf7a-f739857e86a7.tmp
                                                                                                        • Size 40KB
                                                                                                        • SHA256 a4bc7b958bc6cf76b649206cb3756b8c47adb1a841ecd75b772f308fd369986c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        settings.dat

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                        • Size 280B
                                                                                                        • SHA256 59619e39464102fa53912dd9a15237954c5125d546c48a72b8bdb58ad9eb9753
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        settings.dat

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                        • Size 280B
                                                                                                        • SHA256 91a032a4ffcdd10503afdeb5220904a7e7cea899c3a55606bb3e90180ed9472e
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        01511a02-9dab-4551-8adb-c1070bf513f7.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\01511a02-9dab-4551-8adb-c1070bf513f7.tmp
                                                                                                        • Size 26KB
                                                                                                        • SHA256 aa434c3f9d9a95c04606726c172235c96af5a3324c44c948e2f0929b73c8ce07
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        092bce25-d84f-4fff-b7c2-f02c10373c1d.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\092bce25-d84f-4fff-b7c2-f02c10373c1d.tmp
                                                                                                        • Size 12KB
                                                                                                        • SHA256 4e31d3d016eec07404c6e2c5a5f0e5345e15793f0e83927b8baee334444d7984
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        20120661-ebac-47dd-a388-3e50031572ea.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\20120661-ebac-47dd-a388-3e50031572ea.tmp
                                                                                                        • Size 12KB
                                                                                                        • SHA256 a5e761e2db58ce7b1c7897350d2d0319bbb4ebebda959fa8e1fe3522eeede07a
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        3c3b14e9-ffdf-4eba-ae9e-8fcef9961abf.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3c3b14e9-ffdf-4eba-ae9e-8fcef9961abf.tmp
                                                                                                        • Size 12KB
                                                                                                        • SHA256 ea258a32b831d06adad2563fd24054b53d7cd1b7db7bbaebe5ab6143a2e33218
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        686f3083-5735-4ce5-b9d2-c0679950bf98.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\686f3083-5735-4ce5-b9d2-c0679950bf98.tmp
                                                                                                        • Size 23KB
                                                                                                        • SHA256 30df3f1140348b76dc31834f755820cc581a05e74ffebde6db4a120236727a09
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        8799bf0d-ebd3-455d-8619-05678443f2e4.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8799bf0d-ebd3-455d-8619-05678443f2e4.tmp
                                                                                                        • Size 70KB
                                                                                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        LOG

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
                                                                                                        • Size 331B
                                                                                                        • SHA256 fab3a4dc3a9200742423b176c607d8736024589c08dc38f3bcf68c78d2a70c0d
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        LOG.old

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                        • Size 331B
                                                                                                        • SHA256 d86e78c3a8e5c28eee7cefeb6ba571179a39cd538aef33cb4570641a08029831
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        LOG.old

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                        • Size 331B
                                                                                                        • SHA256 b03649db7bc4b1959a084582f51e2cc3c83848c6d303947b0f9a5ec8f02bb1fd
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        f_000071

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
                                                                                                        • Size 28KB
                                                                                                        • SHA256 086c83f877c4a06e5b73fd8cb752bdec9e670fb15280323ac19cb707af8208a8
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_000075

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
                                                                                                        • Size 20KB
                                                                                                        • SHA256 917674f58121b63054f4b921b4a1f379d23107ae1f567aa45980eeba2a5ae553
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_000096

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                                                        • Size 17KB
                                                                                                        • SHA256 85bb1c9ea6610f9ffa458a892f6b5fa208b0a98cf4481b3bfcfb21a8cb61d60c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_000098

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                                                                                        • Size 180KB
                                                                                                        • SHA256 c4b49e1ec1c65a5816c970756795b6a82fdba0f21e1d0b9e98a1f340bfc1cbf8
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000ad

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
                                                                                                        • Size 214KB
                                                                                                        • SHA256 7876b861ee8f611892a2c499aacbfdadbd598bcd87f84de77e936ac254043694
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000d5

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d5
                                                                                                        • Size 310KB
                                                                                                        • SHA256 e76ac9408cd345b5bb009231ca09205dddfcec168b6103856efddb959294973d
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000d6

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d6
                                                                                                        • Size 251KB
                                                                                                        • SHA256 47422c61632a9610c8b1c4f35ec8d207c6bba3e4b741269c7686bc9d8eb81c59
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000da

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000da
                                                                                                        • Size 510KB
                                                                                                        • SHA256 6801c5bbef26c16a2d45eda468eb70ec69048cbe69029db13556a73d07ab7188
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000db

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000db
                                                                                                        • Size 771KB
                                                                                                        • SHA256 b0f76cc010d7c33835995f13c8833651a0bbf8956bdf5dc0772c7c8c2e7e9362
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000e1

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e1
                                                                                                        • Size 19KB
                                                                                                        • SHA256 6a22ce0b2709c7e856a8bd9bbf31b0f7695caeeeb03915b0212d6d959e9bc1b9
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000e2

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e2
                                                                                                        • Size 71KB
                                                                                                        • SHA256 2c295d99e26dcf357d4d01bcf270fd6924b600c9a13dd8c363ef114f4c6976fa
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000e6

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e6
                                                                                                        • Size 741KB
                                                                                                        • SHA256 c323e997bd909eb9d20f68ab1de31049b116eb772f53bd3d72d974131a3b9ffa
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000e7

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e7
                                                                                                        • Size 70KB
                                                                                                        • SHA256 09f02db5e395208074a69bf14e6a58c192afb0449fdce79b3059e7b8e57e99ee
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000f3

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f3
                                                                                                        • Size 631KB
                                                                                                        • SHA256 666fc56710e043eaea61be1eaf07ebb58befd8401c4beb41bf66862f1ca73daa
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000f4

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f4
                                                                                                        • Size 505KB
                                                                                                        • SHA256 b75fbbf40000ecde8e7c3d48599870c648b7fd663c2311aa4c159253aecc3c29
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000f5

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f5
                                                                                                        • Size 497KB
                                                                                                        • SHA256 ab8e506e9b642bfc66f267aa0dc5b9e744cfb72a1a99123345348b9b8449614f
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000f6

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f6
                                                                                                        • Size 532KB
                                                                                                        • SHA256 2c7b8c1e4bcd83ef606c4940e5b8e3049826473fbe70cb2be70a10729952a858
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000f7

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f7
                                                                                                        • Size 561KB
                                                                                                        • SHA256 cf1518fb6cc25f6e28bea60c11d8ef9ccc84b6f46fe1e79f644116b1b2407d78
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000f8

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f8
                                                                                                        • Size 530KB
                                                                                                        • SHA256 228ac97cbffc165f50625c1f49d368c0da81835ba824031ab07803b74474e30c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000f9

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f9
                                                                                                        • Size 539KB
                                                                                                        • SHA256 d29bbf04caed1005a6297654208431ff58abfb1fae7010388b2f02df3b1f9c04
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000fa

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fa
                                                                                                        • Size 536KB
                                                                                                        • SHA256 a27586b6ca5ecf5864e8a7a7270026818c224e4f23e70213073fae19dc7df9b5
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_0000fb

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fb
                                                                                                        • Size 560KB
                                                                                                        • SHA256 eb58d3a2dbc7e3044f59f5ab7a9e441b46a37e89e0c9995d3632dc239b6b8757
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_000186

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000186
                                                                                                        • Size 788KB
                                                                                                        • SHA256 36d91e2df47026ce42a35e4b164f8e5d6e1302192659868f58f1836f86b715a1
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_000187

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000187
                                                                                                        • Size 75KB
                                                                                                        • SHA256 b5db25787c531433c5fed2005df58d869ba938f71370cfd4bf585fe9b42af82c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_000195

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000195
                                                                                                        • Size 302KB
                                                                                                        • SHA256 eceafe6f78fb51d2a0e16aaacece6c22ef7959900aa3f601904e21378fdb5ad2
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        f_00019e

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00019e
                                                                                                        • Size 300KB
                                                                                                        • SHA256 dc4a32fd21e7b9314e06acf7fe42d1d2d5233abdb29a5a0524e87fdf034dc4ac
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        temp-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                        • Size 3KB
                                                                                                        • SHA256 dccbe0fc1ffb77e8da8d0282d82ff8217f258928ca70c9b1973c2395728928e1
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        temp-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                        • Size 4KB
                                                                                                        • SHA256 45d83eecc51f07b767a1a2a774ecdcae01aacee48e950fd987fdd300917fd074
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        temp-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                        • Size 3KB
                                                                                                        • SHA256 4a4c139eedb05816a9732a0004af3bc524f2ecb9d4315c01540d657a730cae3c
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        temp-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                        • Size 3KB
                                                                                                        • SHA256 e6133759af6f95ce7759dffcf813faec91ff51929c3806eea446e186934b89c7
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        temp-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                        • Size 3KB
                                                                                                        • SHA256 207ef6816ec8643e6d45a2903fa282df517d177138b3926714c5d621f3152c0c
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        the-real-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                        • Size 2KB
                                                                                                        • SHA256 fcb967a86828347963ca33c44ae3048a229ea14280245c00a67d08f2cad084ba
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        the-real-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                        • Size 3KB
                                                                                                        • SHA256 89ae32984b64d2e0268a43c3a7f2c69527b75299c88b43db181aea18a15b4363
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        the-real-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                        • Size 4KB
                                                                                                        • SHA256 a74e190b4d4866c4bc9b72efc9c65c77ac3dfbfb0a93e3896cb14d885af17532
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        5fd583d3-5fa3-40a0-af60-f3ca5ba096f9.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5fd583d3-5fa3-40a0-af60-f3ca5ba096f9.tmp
                                                                                                        • Size 2B
                                                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                        • MD5 SHA1 SHA512

                                                                                                        .usage

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\001\t\.usage
                                                                                                        • Size 24B
                                                                                                        • SHA256 a033340a3549e0997b71c56ae0cce5421ed445b36f14dc1f62d9e50288396464
                                                                                                        • MD5 SHA1 SHA512

                                                                                                        00000000

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\001\t\00\00000000
                                                                                                        • Size 1B
                                                                                                        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                                                                                        • MD5 SHA1 SHA512

                                                                                                        0681d582-dac3-4986-9c94-e1ace7c9646a.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0681d582-dac3-4986-9c94-e1ace7c9646a.tmp
                                                                                                        • Size 14KB
                                                                                                        • SHA256 300fa2cd3a5410be5bf72e596f6c80f22bdb441ef3d1f2a07f7fc2fdd149aaa0
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        06c66dc9-cf37-4272-808b-2740586ce04d.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\06c66dc9-cf37-4272-808b-2740586ce04d.tmp
                                                                                                        • Size 7KB
                                                                                                        • SHA256 de150e200366908ee33bd4b73500a0cac3189808833eb56b561ea1e7dda2713c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        4e66a4a0-30a2-4709-af68-21548ca1c82d.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4e66a4a0-30a2-4709-af68-21548ca1c82d.tmp
                                                                                                        • Size 13KB
                                                                                                        • SHA256 45cedff73d08f2cc34c6070d1fec4bf77dfeceb9894ae18c34c37f033d8c540d
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        60d9afb3-7236-460f-ba5d-ca44161f8a11.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\60d9afb3-7236-460f-ba5d-ca44161f8a11.tmp
                                                                                                        • Size 2B
                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                        • MD5 SHA1 SHA512

                                                                                                        63b02a81-7726-48e0-b8c7-629b2287467b.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\63b02a81-7726-48e0-b8c7-629b2287467b.tmp
                                                                                                        • Size 1KB
                                                                                                        • SHA256 5d6ba5832d9601b86451b5c07658232389c2af06b219eab4da1099b2165bc1c0
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        6a61d052-ce0b-4b79-96b4-158d6fcae397.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6a61d052-ce0b-4b79-96b4-158d6fcae397.tmp
                                                                                                        • Size 16KB
                                                                                                        • SHA256 b529b7cb4745a1a047e82b017f99dfd2f4fcaae49c0a6790c9bbae4392610e6b
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        987f78ff-d09d-4c8a-ba5b-61e1af2ad9ac.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\987f78ff-d09d-4c8a-ba5b-61e1af2ad9ac.tmp
                                                                                                        • Size 14KB
                                                                                                        • SHA256 4913a4b6cb9643a41bc73d4d54955f485d2ab6f5ddca0377057ff0094c9dc346
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        aecb2a63-8f2f-4cc4-b727-78b611d1f964.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\aecb2a63-8f2f-4cc4-b727-78b611d1f964.tmp
                                                                                                        • Size 40B
                                                                                                        • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                        • MD5 SHA1 SHA512

                                                                                                        d8528f14-3e12-4daa-84b8-4089c7e24289.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d8528f14-3e12-4daa-84b8-4089c7e24289.tmp
                                                                                                        • Size 15KB
                                                                                                        • SHA256 d432c1a7ec46fdfda99bab349e96b3d51bd044318b793f599cfa183a3a0ba92a
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        fb51ac46-a000-4161-b5eb-8c43be5c9f68.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fb51ac46-a000-4161-b5eb-8c43be5c9f68.tmp
                                                                                                        • Size 1KB
                                                                                                        • SHA256 c719abf979aea0176579a98cdbb15049d6b37cc6044e2dabf4f13d959a0b0df7
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        temp-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\35bf22f5c2345904f78fabe9d787a030ad9056e5\b27543d7-db8a-4686-9e36-cd585fbb2873\index-dir\temp-index
                                                                                                        • Size 120B
                                                                                                        • SHA256 8f72b584b221dfad8ae550cd330d29f046692606afaf0c549b1ac5c8dfac5a87
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        the-real-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\35bf22f5c2345904f78fabe9d787a030ad9056e5\b27543d7-db8a-4686-9e36-cd585fbb2873\index-dir\the-real-index
                                                                                                        • Size 48B
                                                                                                        • SHA256 0bb87a9ba8609bd7c942c8c98ff6233740336e63fdf78b86be2c846af127821c
                                                                                                        • MD5 SHA1 SHA512

                                                                                                        index.txt

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\35bf22f5c2345904f78fabe9d787a030ad9056e5\index.txt
                                                                                                        • Size 146B
                                                                                                        • SHA256 e94c306d1533671557160343c438d6cad27eb46fed98234f32e976071ec9eb44
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        index.txt.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\35bf22f5c2345904f78fabe9d787a030ad9056e5\index.txt.tmp
                                                                                                        • Size 141B
                                                                                                        • SHA256 b65d18e6bde6a27b95daa30681450ca1bdb2912973c24d1c46ce6e98daed7d7e
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        temp-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5d698f02-6ef6-4809-bf9b-f0e8dcabccd6\index-dir\temp-index
                                                                                                        • Size 144B
                                                                                                        • SHA256 cffd99b82c27027d63b6cb068fba2d5b4b406f52d6f7da582f4cf4d54ba8074d
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        the-real-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5d698f02-6ef6-4809-bf9b-f0e8dcabccd6\index-dir\the-real-index
                                                                                                        • Size 144B
                                                                                                        • SHA256 52271e98d109e261439ea9b518c73ff80646a2e57cce4294a0f734a62038262c
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        index.txt.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                        • Size 370B
                                                                                                        • SHA256 96bc52065291bbf9bf0f896a8b8d06e64bddb3b01612a1b047a20df794b27880
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        c54c657bd59bfa8c_0

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\c54c657bd59bfa8c_0
                                                                                                        • Size 207KB
                                                                                                        • SHA256 2a2808b2164b7032c94e9b8fbb9e97a70055b024968c93eb7fec296527be0f68
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        temp-index

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                                                        • Size 72B
                                                                                                        • SHA256 eb0d66163a5e9e7af412e78064220e797a44a73f7c415ec590c4ed1e44821302
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        CURRENT

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                                                        • Size 16B
                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                        • MD5 SHA1 SHA512

                                                                                                        sync_diagnostic.log

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                        • Size 4KB
                                                                                                        • SHA256 dc5be51c231e698a13598a76a00609000658e30113e4598e7e13394b16855af1
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        MANIFEST-000001

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                                                        • Size 41B
                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                        • MD5 SHA1 SHA512

                                                                                                        ac15e8bb-8324-4038-a4c8-19eb230bb253.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ac15e8bb-8324-4038-a4c8-19eb230bb253.tmp
                                                                                                        • Size 12KB
                                                                                                        • SHA256 2ef0986251d0710d04cbeda28da2610ca5ac941b971faa2e2d1f8b3007562eeb
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        b171bdae-f789-4cf1-aec6-19990e73fb9d.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b171bdae-f789-4cf1-aec6-19990e73fb9d.tmp
                                                                                                        • Size 11KB
                                                                                                        • SHA256 92dbc92f42cfb48dfd290ad241e948c1bf4060629e947bd2c4a2d271f3236439
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        bf11179e-12b0-4627-93f1-7c178531bbdc.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bf11179e-12b0-4627-93f1-7c178531bbdc.tmp
                                                                                                        • Size 12KB
                                                                                                        • SHA256 27f1d94a16af0adfabc8bd3b093a4b0448b36fec882ab8be61a85a8d21527a9b
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        cdd63587-43b2-4d02-8582-1eafd6a4b7b5.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cdd63587-43b2-4d02-8582-1eafd6a4b7b5.tmp
                                                                                                        • Size 11KB
                                                                                                        • SHA256 4237e555fa141892611e1aee9754607632f87359c567344429f7b8f1ce77c74c
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        ddfe4a93-8090-4f7c-9ef7-c0ac60d5ed00.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ddfe4a93-8090-4f7c-9ef7-c0ac60d5ed00.tmp
                                                                                                        • Size 12KB
                                                                                                        • SHA256 6d08195af8298e7046ed073524792e589c4d3804608175ec6aa6f9935f6ec999
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        35f862dc-c7d6-4f50-96c3-a90dca9e047e.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\35f862dc-c7d6-4f50-96c3-a90dca9e047e.tmp
                                                                                                        • Size 22KB
                                                                                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        OperationConfig

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                        • Size 3KB
                                                                                                        • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                        RevisitationBloomfilter

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                        • Size 392B
                                                                                                        • SHA256 6e9b7e235214b518f49ed41fc483225cfa4c2735d64539abd6e2b5bed37b0d3d
                                                                                                        • MD5 SHA1 SHA512

                                                                                                        b5c583dd-6397-4005-8389-287ec7eae0a5.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b5c583dd-6397-4005-8389-287ec7eae0a5.tmp
                                                                                                        • Size 392B
                                                                                                        • SHA256 e799c0d37f635c97a20f8c51de0e7ed0bf3df0e8c23323c41f6d32d3e3b5d2f8
                                                                                                        • MD5 SHA1 SHA512

                                                                                                        7744b3a7-4bba-4536-9fe4-d74d877e9091.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7744b3a7-4bba-4536-9fe4-d74d877e9091.tmp
                                                                                                        • Size 13B
                                                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                        • MD5 SHA1 SHA512

                                                                                                        fd221186-9632-4f21-93ea-1ff1be23c860.tmp

                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fd221186-9632-4f21-93ea-1ff1be23c860.tmp
                                                                                                        • Size 41KB
                                                                                                        • SHA256 ed6553031ecd3071ccb35b742233adc51009482dd046f95b2eb864036914c2b9
                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                        default.exc

                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                                                                        • Size 2B
                                                                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                        • MD5 SHA1 SHA512